- Freeradius-Users - lists.freeradius.org

RE: sql counter clarification and issues
by Ross Tsolakidis 12 Jul '05

12 Jul '05

Ok, now I'm really confused :( Can someone please clarify exactly what does the sqlcounter module do ? Basically I need to calculate the data on a daily basis for each user. Thanks for your patience :) Regards, -- Ross -----Original Message----- From: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of Ross Tsolakidis Sent: Tuesday, 5 July 2005 2:14 PM To: FreeRadius users mailing list Subject: RE: sql counter clarification and issues Yes the server is receiving accounting packets. The SQL rows are updating every 5 mins, (I have the NAS set to send accounting packets every 5 mins). I run it in debug mode, I see: Module: Loaded SQL Counter sqlcounter: counter-name = "Daily-Session-Time" sqlcounter: check-name = "Max-Daily-Session" sqlcounter: key = "User-Name" sqlcounter: sqlmod-inst = "sqlcca3" sqlcounter: query = "SELECT SUM(AcctSessionTime - GREATEST((%b - UNIX_TIMESTAMP(AcctStartTime)), 0)) FROM radacct WHERE UserName='%{%k}' AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > '%b'" sqlcounter: reset = "1h" rlm_sqlcounter: Counter attribute Daily-Session-Time is number 1671 rlm_sqlcounter: Check attribute Max-Daily-Session is number 1672 rlm_sqlcounter: num=1, last=h rlm_sqlcounter: Current Time: 1120532709 [2005-07-05 13:05:09], Next reset 1120536000 [2005-07-05 14:00:00] rlm_sqlcounter: num=1, last=h rlm_sqlcounter: Current Time: 1120532709 [2005-07-05 13:05:09], Prev reset 1120532400 [2005-07-05 13:00:00] Module: Instantiated sqlcounter (dailycounter) But no reset. Does anyone have this working, if so, what am I looking for, what am I supposed to see ? Thanks :) Regards, -- Ross -----Original Message----- From: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Tuesday, 5 July 2005 2:05 AM To: FreeRadius users mailing list Subject: Re: sql counter clarification and issues "Ross Tsolakidis" <Ross.Tsolakidis(a)day3.com.au> wrote: > At midnight every night will it begin a new row in SQL ? I don't know, I've never used the module. > Because at the moment there are no new rows being created, no counters > being reset. Is the server receiving accounting packets? Run it in debug mode with "reset=hour", and spend some time looking at what it's doing. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

Re: Compiling Problem concerning `crypt' !!!
by kkwong1＠sfc.hk 12 Jul '05

12 Jul '05

** Your attention is drawn to the note at the end of this message. ** MESSAGE Sent freeradius-users-bounces@l by: ists.freeradius.org To: FreeRadius users mailing Ext : list <freeradius-users(a)lists.fr eeradius.org> cc: From: "Alan DeKok" <aland(a)ox.org> Date: 12/07/2005 00:45 Our Ref: Subje Re: Compiling Problem concerning `crypt' !!! ct: -------------------------------------------------------------------------- Alan, The congifuration is fine , there are no errors inside. Attached the ./configure codes as below, =<path>. configure: warning: sql submodule 'unixodbc' disabled creating ./config.status creating Makefile configuring in src/modules/rlm_unix running /bin/sh ./configure --enable-ltdl-install --cache-file =../../.././confi g.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANT ICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANT ICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for system password file... /etc/passwd checking for system shadow password file... /etc/shadow checking for crypt... (cached) yes checking for crypt.h... (cached) yes checking for shadow.h... (cached) yes checking for getspnam... (cached) yes checking for getusershell... (cached) yes checking for getspnam in -lshadow... (cached) no checking for fgetpwent... (cached) yes checking for fgetspent... (cached) yes checking for fgetgrent... (cached) yes creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in src/modules/rlm_x99_token running /bin/sh ./configure --enable-ltdl-install --cache-file =../../.././confi g.cache --srcdir=. loading cache ../../.././config.cache checking how to run the C preprocessor... (cached) gcc -E checking for inttypes.h... (cached) yes creating ./config.status creating Makefile configuring in src/modules/rlm_checkval running /bin/sh ./configure --enable-ltdl-install --cache-file =../../.././confi g.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANT ICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANT ICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... no checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for regex.h... (cached) yes creating ./config.status creating Makefile creating config.h config.h is unchanged -bash-3.00$ -bash-3.00$ kkwong1(a)sfc.hk wrote: > Attached the codes of error when I am compiling Radius 1.0.4 > > When I finish ./configure, then MAKE, the error happens. Did the "configure" process finish without errors? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ______________________________________________________________________ This is a personal e-mail that is not sent on behalf of the Securities and Futures Commission. The Securities and Futures Commission accepts no responsibility for its contents or any attachments.

1 0

MySQL Connection Failure
by Thomas Tinsley 11 Jul '05

11 Jul '05

Hi my name is Tom and I am installing FreeRadius for the first time. Specifications: OS: Fedora Core 4 Linux Kernel 2.6.11smp Freeradius version : 1.0.2 MySQL version : 4.1.11 DEBUG Info: Mon Jul 11 14:05:01 2005 : Error: rlm_sql (sql): Failed to connect DB handle #4 Mon Jul 11 14:05:01 2005 : Info: rlm_sql (sql): There are no DB handles to use! skipped 5, tried to connect 1 Mon Jul 11 14:05:10 2005 : Info: rlm_sql (sql): Trying to (re)connect unconnected handle 4.. Mon Jul 11 14:05:10 2005 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4 Mon Jul 11 14:05:10 2005 : Error: rlm_sql_mysql: Couldn't connect socket to MySQL server root@localhost:radius Mon Jul 11 14:05:10 2005 : Error: rlm_sql_mysql: Mysql error 'Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (13)' Question? Does anyone have a method to trace the connection attempt? MySQL is not kicking out any log info that would help. I have confirmed the MySQL server is running, and can connect to databases using PHP & PERL. MyADMINPHP and Dialup-Admin are installed, configured, and tested successfully for the MySQL server. I just need to get Radius to do the same. Radius.conf & sql.conf are modified accordingly. Any help would be appreciated. Thank you. Tom Tinsley Justnerds on SKYPE

2 1

self user registration
by Michael Fisher 11 Jul '05

11 Jul '05

I am currently envolved in a wireless project. How ever we currently need a radius server with the ability for users to register them selfs, also it would be ideal if this solution offerd email authentication. Is this possible at all?

6 8

eap-ttls and proxy?
by Tim Tyler 11 Jul '05

11 Jul '05

Freeradius experts, We have Freeradius working with eap-ttls for local system users and passwords. However, I would prefer to use it as a proxy server. My problem is that some of the old proxy servers are Livingston verions that don't support eap, etc. So, is it possible to support eap-ttls from a wireless client to the freeradius proxy server, but use open text from the freeradius proxy server to our Livingston radius servers? If so, how? Tim Tim Tyler Network Engineer

2 1

Compiling Problem concerning `crypt' !!!
by kkwong1＠sfc.hk 11 Jul '05

11 Jul '05

** Your attention is drawn to the note at the end of this message. ** Hi all, Attached the codes of error when I am compiling Radius 1.0.4 When I finish ./configure, then MAKE, the error happens. The error is related to `lrad_crypt_check', and i have no idea what it does. Please give any comment on the problem. Thanks, Sunny ___________________________________________________________________________________________________________________ t.c -o crypt.o In file included from crypt.c:27: /usr/include/pthread.h:299: error: parse error before '*' token /usr/include/pthread.h:300: error: parse error before '*' token /usr/include/pthread.h:301: error: parse error before '*' token /usr/include/pthread.h:302: error: parse error before '*' token /usr/include/pthread.h:303: error: parse error before '*' token /usr/include/pthread.h:304: error: parse error before '*' token /usr/include/pthread.h:305: error: parse error before '*' token /usr/include/pthread.h:306: error: parse error before '*' token /usr/include/pthread.h:308: error: parse error before '*' token /usr/include/pthread.h:309: error: parse error before '*' token /usr/include/pthread.h:311: error: parse error before '*' token /usr/include/pthread.h:312: error: parse error before '*' token crypt.c: In function `lrad_crypt_check': crypt.c:60: warning: implicit declaration of function `crypt' crypt.c:60: warning: assignment makes pointer from integer without a cast make[4]: *** [crypt.o] Error 1 make[4]: Leaving directory `/var/tmp/freeradius-1.0.4/src/lib' make[3]: *** [common] Error 2 make[3]: Leaving directory `/var/tmp/freeradius-1.0.4/src' make[2]: *** [all] Error 2 make[2]: Leaving directory `/var/tmp/freeradius-1.0.4/src' make[1]: *** [common] Error 2 make[1]: Leaving directory `/var/tmp/freeradius-1.0.4' make: *** [all] Error 2 -bash-3.00$ ______________________________________________________________________ This is a personal e-mail that is not sent on behalf of the Securities and Futures Commission. The Securities and Futures Commission accepts no responsibility for its contents or any attachments.

2 1

Problems authenticating and assigning DHCP addresses
by jck-freeradius＠southwestern.edu 11 Jul '05

11 Jul '05

I am running Freeradius-1.0.4 from source. Radius is accessed by XP requesting through a Cisco AP. I am running PEAP (MS-CHAP-V2) w/ SQL. My first question is: How do I tie all of this together with a DHCPd server, so that they authenticated clients can be assigned an IP address. I am using VLAN tunnel attributes so that, when DHCP support /is/ implemented, I can assign different IP addresses with different access privileges. How can I implement a DHCPd server into my configuration? Second question: How can I authenticate against a Crypt-Password, in SQL? I am able to receive an Access-Accept when using a clear text password (Attribute=Password), through XP. I receive: rlm_eap_tls: Done initial handshake eaptls_process returned 7 rlm_eap_peap: EAPTLS_OK rlm_eap_peap: Session established. Decoding tunneled attributes. rlm_eap_peap: Received EAP-TLV response. rlm_eap_peap: Tunneled data is valid. rlm_eap_peap: Had sent TLV failure, rejecting. rlm_eap: Handler failed in EAP/peap rlm_eap: Failed in EAP select modcall[authenticate]: module "eap" returns invalid for request 9 modcall: group authenticate returns invalid for request 9 auth: Failed to validate the user. Login incorrect: [johnk/<no User-Password attribute>] (from client Aironet1100 port 318 cli 000e.35b5.eb8f) Delaying request 9 for 1 seconds Finished request 9 Going to the next request when using Crypt-Password. However, Crypt-Password works fine when testing with radtest. Sincerely, --johnk

4 6

Problem with 1.1.0-pre0 - CVS Snapshot of 30th of June
by Jaco van Tonder 11 Jul '05

11 Jul '05

I have a problem when proxying an auth request to another server. The server crashes with the following error: rad_recv: Access-Request packet from host 127.0.0.1 port 32770, id=130, length=69 --- Walking the entire request list --- Thread 1 got semaphore Thread 1 handling request 0, (1 handled so far) Threads: total/active/spare threads = 5/1/4 Waking up in 1 seconds... User-Name = "jacotest@JacoTest" User-Password = "jjtest" NAS-IP-Address = 127.0.0.1 NAS-Port = 0 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '/' in User-Name = "jacotest@JacoTest", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "IPASS" returns noop for request 0 rlm_realm: Looking up realm "JacoTest" for User-Name = "jacotest@JacoTest" rlm_realm: Found realm "JacoTest" rlm_realm: Proxying request from user jacotest to realm JacoTest rlm_realm: Adding Realm = "JacoTest" rlm_realm: Preparing to proxy authentication request to realm "JacoTest" modcall[authorize]: module "suffix" returns updated for request 0 modcall[authorize]: module "files" returns notfound for request 0 radius_xlat: 'jacotest@JacoTest' rlm_sql (sql): sql_set_user escaped user --> 'jacotest@JacoTest' rlm_sql (sql): Reserving sql socket id: 4 radius_xlat: 'SELECT id, UserName, Attribute, Value, Op ??FROM radcheck ??WHERE Username = 'jacotest@JacoTest' ??ORDER BY id' rlm_sql_postgresql: query: SELECT id, UserName, Attribute, Value, Op ??FROM radcheck ??WHERE Username = 'jacotest@JacoTest' ??ORDER BY id rlm_sql_postgresql: Status: PGRES_TUPLES_OK rlm_sql_postgresql: affected rows = radius_xlat: 'SELECT GroupName FROM usergroup WHERE UserName='jacotest@JacoTest'' rlm_sql_postgresql: query: SELECT GroupName FROM usergroup WHERE UserName='jacotest@JacoTest' rlm_sql_postgresql: Status: PGRES_TUPLES_OK rlm_sql_postgresql: affected rows = rlm_sql (sql): Released sql socket id: 4 rlm_sql (sql): User jacotest@JacoTest not found modcall[authorize]: module "sql" returns notfound for request 0 rlm_sqlcounter: Entering module authorize code rlm_sqlcounter: Could not find Check item value pair modcall[authorize]: module "dailycounter" returns noop for request 0 rlm_sqlcounter: Entering module authorize code rlm_sqlcounter: Could not find Check item value pair modcall[authorize]: module "noresetcounter" returns noop for request 0 modcall[authorize]: module "expiration" returns noop for request 0 modcall[authorize]: module "logintime" returns noop for request 0 modcall: leaving group authorize (returns updated) for request 0 Assertion failed in request_list.c, line 724 This ONLY happens for proxied requests. All local requests gets authenticated ok. What can be the problem Jaco van Tonder

2 3

hotspotlogin.cgi problem
by sean 10 Jul '05

10 Jul '05

Hi, I have set up a FreeRadius server which I am trying to access from Chilli on a Linksys AP running DD-WRT and Chilli. Radtest shows that the Radius server is running and Chilli is directing users to /cgi- bin/hotspotlogin.cgi. However this produces an internal server error from Apache. If I send users to /cgi-bin/test.cgi the test page loads with no errors. I have no idea where to start looking for a solution. Any advice or pointers to where I've gone wrong would be very much appreciated. Regards, Sean Bracken

2 1

accounting and LOCAL realm (freeradius dont send Accounting-Response)
by Victor 10 Jul '05

10 Jul '05

Hi! Im using FreeRadius (1.0.2, 1.0.3) for proxying only. My proxy.conf: realm LOCAL { type = radius authhost = LOCAL accthost = LOCAL } realm NULL { type = radius authhost = 192.168.1.1:1812 accthost = 192.168.1.1:1813 secret = key1 } realm provider.com { type = radius authhost = 10.1.1.1:1645 accthost = 10.1.1.1:1646 secret = key2 nostrip } I need some users, who called "555555" (any names or realms) authenticate and accounting local via start/alive/stop scripts. Authentication work perfectly: Im added to users: DEFAULT Auth-Type = Accept, Called-Station-Id == "555555", Proxy-To-Realm := LOCAL Exec-Program-Wait = "/usr/local/bin/555555-auth.pl" But accounting with similar config dont work. My acct_users: DEFAULT Proxy-To-Realm := LOCAL, Called-Station-Id == "555555" Exec-Program = /usr/local/bin/555555-acct.pl I see in logs WARNING: Cancelling proxy to Realm LOCAL, as the realm is local. But freeradius DONT send Accounting-Response to NAS and NAS continue re-sending accounting packets. In logs its look like: ... rlm_detail: Freeradius-Proxied-To set to 255.255.255.255 modcall[accounting]: module "reply_log" returns ok for request 0 modcall: group accounting returns ok for request 0 WARNING: Cancelling proxy to Realm LOCAL, as the realm is local. Finished request 0 Going to the next request ... -- /kha0s

3 6